New PoC Exploit for Apache OfBiz Vulnerability Poses Risk to ERP Systems

Security researchers released a cross-platform proof-of-concept that exploits CVE-2023-51467 in Apache OFBiz (CVSS 9.8) to execute memory-resident payloads and obtain remote shells by abusing groovy.util.Eval, enabling stealthy in-memory code execution on Windows and Linux; the flaw has been patched in Apache OFBiz 18.12.11 but threat actors have been observed attempting exploitation.